diff --git a/sdk_container/src/third_party/portage-stable/net-firewall/ipset/files/ipset-bash-completion.patch b/sdk_container/src/third_party/portage-stable/net-firewall/ipset/files/ipset-bash-completion.patch
new file mode 100644
index 0000000000..1c2b6e62b8
--- /dev/null
+++ b/sdk_container/src/third_party/portage-stable/net-firewall/ipset/files/ipset-bash-completion.patch
@@ -0,0 +1,11 @@
+--- a/utils/ipset_bash_completion/ipset	2024-03-09 12:53:38.756882196 -0500
++++ b/utils/ipset_bash_completion/ipset	2024-03-09 12:54:32.838917743 -0500
+@@ -1005,7 +1005,7 @@ if ((got_bashcompl)); then
+ 	if ! declare -F _ipset_known_hosts &>/dev/null; then
+ 	eval '_ipset_known_hosts() { '$(declare -f _known_hosts_real | \
+ 		grep -v __ltrim_colon_completions | \
+-		grep -Ev "^_known_hosts_real.*$" | grep -Ev "^(\{|\})")'; }'
++		grep -Ev "^_known_hosts_real.*$" | grep -Ev "^(\{|\})")' }'
+ 	fi
+ fi
+ 
diff --git a/sdk_container/src/third_party/portage-stable/net-firewall/ipset/ipset-7.21.ebuild b/sdk_container/src/third_party/portage-stable/net-firewall/ipset/ipset-7.21.ebuild
index 433d477210..6f112b1ac2 100644
--- a/sdk_container/src/third_party/portage-stable/net-firewall/ipset/ipset-7.21.ebuild
+++ b/sdk_container/src/third_party/portage-stable/net-firewall/ipset/ipset-7.21.ebuild
@@ -21,6 +21,8 @@ RDEPEND="
 DEPEND="${RDEPEND}"
 BDEPEND="virtual/pkgconfig"
 
+PATCHES=( "${FILESDIR}/${PN}-bash-completion.patch" )
+
 DOCS=( ChangeLog INSTALL README UPGRADE )
 
 # configurable from outside, e.g. /etc/portage/make.conf